NCSC Feed

How organisations can address the growing trend in which multiple vulnerabilities within a single product are exploited over a short period.

Do you need antivirus (AV) products on smartphones and tablets?

The first in a series of blogs to ease your journey towards a zero trust architecture.

The NCSC's Cloud Security Research Lead suggests some approaches to help you get confidence in cloud services.

In part 2 of his Cloud Blog Trilogy, Andrew explains why it's better for everyone if cloud providers are willing to be open about how they run their services.

Highlighting guidance which will help you secure your servers

How we made our commercial assurance business react to the demand of the Smart Meter programme, and how we can use this as a catalyst for future improvement.

'Risk Management' is the first certifiable specialism under the NCSC's revised CCP scheme.

Test of the colour combinations which can be used on the website for use by anyone building or developing content.

How malware works on Operational Technology (OT) and how to stop it.

Everything you need to know about the 19 Academic Centres of Excellence in Cyber Security Research (ACE-CSR) in one place

A new white paper from the NCSC explains the potential benefits of adopting a cloud-system.

Helen L discusses how security can be woven more seamlessly into the development process.

Andrew A explains the updated guidance for Microsoft Office macros

An outline of the NCSC's approach to understanding the security of Software as a Service (SaaS) offerings.

Here we explain a bit about maturity models, look at how they've been used for cyber security, and explain why the NCSC is no longer supporting the IA Maturity Model (IAMM) introduced in 2008.

In this post I propose that the software development community should work on developing and then standardising security-related libraries that focus on what the developer is trying to achieve.

Even the best authentication can't help you if there is an easy way to bypass it.

David K introduces the concept of cyber resilience, and the benefits it brings.